Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security] Upgrade vertx to 3.9.8 to address CVE-2019-17640 #10889

Merged
merged 1 commit into from
Jun 21, 2021
Merged

[Security] Upgrade vertx to 3.9.8 to address CVE-2019-17640 #10889

merged 1 commit into from
Jun 21, 2021

Conversation

lhotari
Copy link
Member

@lhotari lhotari commented Jun 10, 2021 •
edited
Loading

Motivation

  • The current vert.x version 3.5.4 contains CVE-2019-17640 vulnerability and causes Pulsar to get flagged in security vulnerability scanning.

Modifications

  • Upgrade vert.x version to 3.9.8.

@lhotari lhotari added this to the 2.9.0 milestone Jun 10, 2021
@lhotari lhotari self-assigned this Jun 10, 2021
@lhotari lhotari merged commit bce9144 into apache:master Jun 21, 2021
yangl pushed a commit to yangl/pulsar that referenced this pull request Jun 23, 2021
@lhotari @yangl
[Security] Upgrade vertx to 3.9.8 to address CVE-2019-17640 (apache#1…
31d83fd 
…0889)
codelipenghui pushed a commit that referenced this pull request Jun 25, 2021
@lhotari @codelipenghui
[Security] Upgrade vertx to 3.9.8 to address CVE-2019-17640 (#10889)
be1eedc 
(cherry picked from commit bce9144)
@codelipenghui codelipenghui added the cherry-picked/branch-2.8 Archived: 2.8 is end of life label Jun 25, 2021
bharanic-dev pushed a commit to bharanic-dev/pulsar that referenced this pull request Mar 18, 2022
@lhotari @ciaocloud
[Security] Upgrade vertx to 3.9.8 to address CVE-2019-17640 (apache#1…
7622986 
…0889)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sijie sijie sijie approved these changes

@aahmed-se aahmed-se aahmed-se approved these changes

@merlimat merlimat Awaiting requested review from merlimat

@codelipenghui codelipenghui Awaiting requested review from codelipenghui

Assignees

@lhotari lhotari

Labels
area/security cherry-picked/branch-2.8 Archived: 2.8 is end of life release/2.8.1
Projects
None yet
Milestone
2.9.0
Development

Successfully merging this pull request may close these issues.

None yet
4 participants
@lhotari @sijie @aahmed-se @codelipenghui